Internet access drops every few minutes

[Cooleffect]

Hello everyone,
I am using a Lenovo laptop for many years and I never had this problem with this laptop before. Everyone in the apartment using the same network. It is a few months that although my connection status shows that it is connected to the internet but I can not open any pages or DL anything. When I use troubleshooter my laptop freeze or just says unable to resolve the problem. When I try to use another router of the building it says unable to connect to internet. What should I do?

 

[samuria]

Welcome to the forum. Open a CMD prompt then type


Ipconfig /all


Post results

 

[Cooleffect]

Thank you. It is a long list of information. Are you sure if it is safe to share a print screen of it? Or is there any specific part that I can share it?

 

[samuria]

If you goto top of the window click then edit mark all the txt then copy and past into your post its safe as the whole word uses 192.168 private range

 

[Cooleffect]

Windows IP Configuration

Host Name . . . . . . . . . . . . : Alireza-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Wireless LAN adapter Wireless Network Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
Physical Address. . . . . . . . . : 00-26-82-A6-B5-A5
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom 802.11n Network Adapter
Physical Address. . . . . . . . . : 00-26-82-A6-B5-A5
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::8ca6:6840:2544:79b7%14(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.118(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : السبت, جوييه 13, 2019 05:14:26 ب.ظ
Lease Expires . . . . . . . . . . : الثلاثاء, جوييه 16, 2019 05:14:25 ب.ظ
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 268445314
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-24-58-2C-2D-88-AE-1D-24-DB-74

DNS Servers . . . . . . . . . . . : 2001:4860:4860::8888
2001:4860:4860::8844
208.67.222.222
208.67.220.220
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Bluetooth Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
Physical Address. . . . . . . . . : F0-7B-CB-D2-13-CE
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{7E911873-3284-4BE0-9BEB-BED6CF6D7404}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 12:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

 

[samuria]

The IP looks ok how strong a signal do you get? Open a CMD prompt again type


Tracert 194.119.131.66


Tracert adobe.com

Post both result

 

[Cooleffect]

tracert 194.119.131.66

Tracing route to 194.119.131.66 over a maximum of 30 hops

1 Alireza-PC [192.168.1.118] reports: Destination host unreachable.

Trace complete.

C:\Users\Alireza>tracert adobe.com
Unable to resolve target system name adobe.com.

 

[samuria]

Open an elevated cmd prompt ie find cmd.exe right click choose run as admin type each line press return
ipconfig /flushdns
ipconfig /release
ipconfig /renew /
netsh advfirewall reset
netsh winsock reset
netsh int ipv4 reset


Please download and save FRST 64bit or FRST 32 bit to your Desktop.

Download Farbar Recovery Scan Tool



Choose the 64 bit one


Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Make sure that Addition option is checked.
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please copy and paste log back here.
The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

 

[Cooleffect]

I assume I suppose to do all these things right after I lost my connection so I wait a few minutes after I restart my computer and try to open a few pages waiting for a few minutes to disconnect. BTW when I restart my computer I have internet access and if I don't open any pages or just start downloading by download manager there is a big chance to stay online without problem.

 

[Cooleffect]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>ipconfig /flushdns

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Windows\system32>ipconfig /release

Windows IP Configuration

No operation can be performed on Wireless Network Connection 2 while it has its
media disconnected.
No operation can be performed on Bluetooth Network Connection while it has its m
edia disconnected.

Wireless LAN adapter Wireless Network Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::8ca6:6840:2544:79b7%14
Default Gateway . . . . . . . . . :

Ethernet adapter Bluetooth Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter isatap.{7E911873-3284-4BE0-9BEB-BED6CF6D7404}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter Local Area Connection* 12:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

C:\Windows\system32>ipconfig /renew

Windows IP Configuration

No operation can be performed on Wireless Network Connection 2 while it has its
media disconnected.
An error occurred while renewing interface Wireless Network Connection : unable
to contact your DHCP server. Request has timed out.
No operation can be performed on Bluetooth Network Connection while it has its m
edia disconnected.

C:\Windows\system32>netsh advfirewall reset
Ok.


C:\Windows\system32>netsh winsock reset

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


C:\Windows\system32>netsh int ipv4 reset
Reseting Global, OK!
Reseting Interface, OK!
Restart the computer to complete this action.


C:\Windows\system32>

 

[Cooleffect]

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-07-2019
Ran by Alireza (14-07-2019 01:06:07)
Running from C:\Users\Alireza\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2019-04-28 17:52:46)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2088436604-864978497-4204296061-500 - Administrator - Disabled)
Alireza (S-1-5-21-2088436604-864978497-4204296061-1000 - Administrator - Enabled) => C:\Users\Alireza
Guest (S-1-5-21-2088436604-864978497-4204296061-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2088436604-864978497-4204296061-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Age of Empires II HD The Rise of the Rajas (HKLM\...\YWdlb2ZlbXBpcmVzaWloZA_is1) (Version: 1 - )
Broadcom 802.11 Wireless Driver (HKLM-x32\...\{8991E763-21F5-4DEA-A938-5D9D77DCB488}) (Version: 1.0.0.0 - )
Caesar 4 (HKLM-x32\...\Caesar 4_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91)
Command and Conquer 3 - Tiberium Wars (HKLM-x32\...\Command and Conquer 3 - Tiberium Wars_is1) (Version: - )
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.111.0.62 - Conexant)
DAEMON Tools Pro (HKLM\...\DAEMON Tools Pro) (Version: 8.2.0.0708 - Disc Soft Ltd)
ETDWare PS/2-x64 7.0.4.17_WHQL (HKLM\...\Elantech) (Version: 7.0.4.17 - ELAN Microelectronics Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 75.0.3770.100 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.2.2.25 - PandoraTV)
Lenovo Service Bridge (HKU\S-1-5-21-2088436604-864978497-4204296061-1000\...\{2C74547D-EF88-47F4-85F5-BE46A31E26B7}_is1) (Version: 4.0.6.7 - Lenovo)
Lenovo Solution Center (HKLM\...\{5E35CA26-A9A2-47B8-AB52-8D0C9A3CA685}) (Version: 03.12.003 - Lenovo)
Lenovo System Update (HKLM-x32\...\TVSU_is1) (Version: 5.07.0084 - Lenovo)
Lenovo_Wireless_Driver (HKLM-x32\...\{28ABE740-47F3-441B-9437-852F6A64EFF8}) (Version: 1.02.01 - Lenovo)
Microsoft .NET Framework 4.8 (HKLM\...\{16735AF7-1D8D-3681-94A5-C578A61EC832}) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Mozilla Firefox 67.0.4 (x64 en-US) (HKLM\...\Mozilla Firefox 67.0.4 (x64 en-US)) (Version: 67.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 66.0.3 - Mozilla)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation)
Onekey Theater (HKLM-x32\...\{DFB19121-0609-49C1-92B1-546E5A940FE8}) (Version: 2.0.1.7 - Lenovo)
Outils de vérification linguistique 2016 de Microsoft Office*- Français (HKLM\...\{90160000-001F-040C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver For Windows Vista and Later (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0009 - Realtek)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30116 - Realtek Semiconductor Corp.)
Skype version 8.46 (HKLM-x32\...\Skype_is1) (Version: 8.46 - Skype Technologies S.A.)
Tropico 5 - Complete Collection (HKLM-x32\...\Tropico 5 - Complete Collection_is1) (Version: - )
Update for Skype for Business 2016 (KB4018367) 64-Bit Edition (HKLM\...\{90160000-0011-0000-1000-0000000FF1CE}_Office16.PROPLUS_{EFCDE8C5-CE14-4F4A-87AF-83D5E3BA2E52}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB4018367) 64-Bit Edition (HKLM\...\{90160000-00C1-0000-1000-0000000FF1CE}_Office16.PROPLUS_{EFCDE8C5-CE14-4F4A-87AF-83D5E3BA2E52}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB4018367) 64-Bit Edition (HKLM\...\{90160000-012B-0409-1000-0000000FF1CE}_Office16.PROPLUS_{EFCDE8C5-CE14-4F4A-87AF-83D5E3BA2E52}) (Version: - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2018-05-12] (Tonec Inc. -> Tonec Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDrive] -> {A5415364-784A-41A5-B47A-D452909CA8FF} => C:\Program Files\DAEMON Tools Pro\DTShl64.dll [2017-05-17] (Disc Soft Ltd -> Disc Soft Ltd)
ContextMenuHandlers3: [DaemonShellExtImage] -> {40966797-8FFE-46C8-9EF8-7003F33CCF0F} => C:\Program Files\DAEMON Tools Pro\DTShl64.dll [2017-05-17] (Disc Soft Ltd -> Disc Soft Ltd)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2009-12-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"",Filter="__EventFilter.Name="BVTFilter"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]

==================== Loaded Modules (Whitelisted) ==============

2019-04-12 15:43 - 2019-04-12 15:43 - 002651648 _____ (Microsoft Corporation) [File not signed] c:\windows\system32\wuaueng2.dll
2018-06-24 01:44 - 2019-04-29 02:54 - 003961968 _____ (Tonec Inc. -> Tonec Inc.) [File not signed] C:\Program Files (x86)\Internet Download Manager\IDMan.exe

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 05:34 - 2009-06-11 00:00 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2088436604-864978497-4204296061-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 208.67.222.222 - 208.67.220.220
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/13/2019 11:41:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (07/13/2019 11:06:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (07/13/2019 08:56:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (07/13/2019 08:45:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (07/13/2019 08:31:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (07/13/2019 05:36:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (07/13/2019 05:24:31 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (07/13/2019 05:16:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.


System errors:
=============
Error: (07/13/2019 08:43:34 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 8:41:35 PM on ‎7/‎13/‎2019 was unexpected.

Error: (07/13/2019 08:29:46 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 6:59:47 PM on ‎7/‎13/‎2019 was unexpected.

Error: (07/13/2019 05:25:00 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender Antivirus - KB915597 (Definition 1.297.947.0).

Error: (07/12/2019 10:39:17 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 10:34:08 PM on ‎7/‎12/‎2019 was unexpected.

Error: (07/12/2019 08:24:54 PM) (Source: Microsoft-Windows-CorruptedFileRecovery-Server) (EventID: 10) (User: NT AUTHORITY)
Description: The system file C:\Windows\System32\lpremove.exe may be corrupted, but Windows could not determine if the file was actually damaged (error code 2147956481). No repair action was taken. Run the command "sfc /scannow" at an administrative command prompt to check for errors and to repair the file if necessary.

Error: (07/12/2019 08:22:13 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (07/12/2019 08:22:13 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (07/12/2019 08:22:13 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.


Windows Defender:
===================================
Date: 2019-07-13 17:24:29.455
Description:
Windows Defender has encountered an error trying to update the engine.
New Engine Version:1.1.16100.4
Previous Engine Version:1.1.6402.0
Update Source:User
Error Code:0x8050800c
Error description:An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.

Date: 2019-07-12 13:37:00.202
Description:
Windows Defender has encountered an error trying to update the engine.
New Engine Version:1.1.16100.4
Previous Engine Version:1.1.6402.0
Update Source:User
Error Code:0x8050800c
Error description:An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.

Date: 2019-07-11 13:02:40.839
Description:
Windows Defender has encountered an error trying to update the engine.
New Engine Version:1.1.16100.4
Previous Engine Version:1.1.6402.0
Update Source:User
Error Code:0x8050800c
Error description:An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.

Date: 2019-07-10 15:10:05.901
Description:
Windows Defender has encountered an error trying to update the engine.
New Engine Version:1.1.16100.4
Previous Engine Version:1.1.6402.0
Update Source:User
Error Code:0x8050800c
Error description:An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.

Date: 2019-07-09 14:32:49.862
Description:
Windows Defender has encountered an error trying to update the engine.
New Engine Version:1.1.16100.4
Previous Engine Version:1.1.6402.0
Update Source:User
Error Code:0x8050800c
Error description:An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.

==================== Memory info ===========================

BIOS: LENOVO 29CN27WW(V2.04) 06/01/2010
Motherboard: LENOVO Base Board Product Name
Processor: Intel(R) Core(TM) i5 CPU M 450 @ 2.40GHz
Percentage of memory in use: 68%
Total physical RAM: 3958.85 MB
Available physical RAM: 1240.5 MB
Total Virtual: 11915.85 MB
Available Virtual: 9236.48 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:49.93 GB) (Free:18.91 GB) NTFS
Drive d: (Anime) (Fixed) (Total:97.65 GB) (Free:5.38 GB) NTFS
Drive e: (Game - Stuff) (Fixed) (Total:97.65 GB) (Free:1.35 GB) NTFS
Drive f: (G Stuff) (Fixed) (Total:143.49 GB) (Free:32 GB) NTFS
Drive g: (Music and Movies ) (Fixed) (Total:76.54 GB) (Free:5.23 GB) NTFS

\\?\Volume{36e93e3f-6a31-11e9-9919-806e6f6e6963}\ () (Fixed) (Total:0.49 GB) (Free:0.46 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: C3FFC3FF)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=76.5 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=338.8 GB) - (Type=0F Extended)

==================== End of Addition.txt ============================

 

[Cooleffect]

First.text is too big to paste. I really appreciate your help. Is there any chance to send it to your email or somewhere like FB ?

 

[samuria]

Post half at a time or hit the last icon paper clip and add as a txt file

 

[Cooleffect]

View attachment FRST.txt

 

[samuria]

There are a few worrying problems you defender isnt updating

These error could indicate a faulty hard drive or motherboard

Error: (07/12/2019 08:22:13 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (07/12/2019 08:22:13 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (07/12/2019 08:22:13 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.


This file isnt signed which could be a virus as all MS files should be signed
2019-04-12 15:43 - 2019-04-12 15:43 - 002651648 _____ (Microsoft Corporation) [File not signed] c:\windows\system32\wuaueng2.dll

This shows files could be corrupt
Error: (07/12/2019 08:24:54 PM) (Source: Microsoft-Windows-CorruptedFileRecovery-Server) (EventID: 10) (User: NT AUTHORITY)
Description: The system file C:\Windows\System32\lpremove.exe may be corrupted, but Windows could not determine if the file was actually damaged (error code 2147956481). No repair action was taken. Run the command "sfc /scannow" at an administrative command prompt to check for errors and to repair the file if necessary.


Temporarily disable your AntiVirus and AntiSpyware protection - instructions here.

Please visit the ESET Online Scanner website
Click the SCAN NOW button to download the esetonlinescanner_enu.exe file to the Desktop
Double click esetonlinescanner_enu.exe. Accept the Terms of Use
Select Enable detection of potentially unwanted applications
In Advanced Settings: make sure that Clean threats automatically is unchecked
And Enable detection of potentially unsafe applications, Enable detection of suspicious applications, Scan archives, and Enable Anti-Stealth technology are all checked.
Click Scan
The program will begin to download it's virus database. The speed may vary depending on your Internet connection.
When completed, the program will begin to scan. This may take several hours. Please, be patient.
Do not do anything on your machine as it may interrupt the scan.
When completed it'll show a list of "Threats found", click beneath it on Save to text file.... and save it as ESET log.txt on your Desktop.
Then click Do not clean. Place a checkmark at Delete application's data on close, click Finish and close the program.



Post the ESET log.txt report.


You have some avast eft which can stop the internet you need to run their remover Avast Uninstall Utility | Download aswClear for Avast Removal

 

[Cooleffect]

First time I scan my computer encountered a critical problem and restarted automatically after several hours of work and finding 9 threats. I scan it again today but it did not find the threads again. Only one new threads found today and there were not any advance options or maybe I did not find it. So I think all threads cleaned automatically.

View attachment Eset.txt

 

[samuria]

To fix some other problems do a full disk scan and check to fix any errors then open an administrative CMD prompt by right click on it and choose run as administrator then type sfc /scannow. It may take some time

 

[Cooleffect]

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\Windows\system32>

 

[Cooleffect]

Storage devices

UDI Wdc-WDCWD5000BEVT-24A0RT0-WD-WX41A40M6113
Display Name WDC WD5000BEVT-24A0RT0 - 465.76 GBs
Manufacturer Wdc
Model WDC WD5000BEVT-24A0RT0
Serial WD-WX41A40M6113
Firmware 01.01A02
Size 465.76 GBs
Rotation Rate 5400 RPM
Cache 8.00 MBs
Temperature 48 °C
Physical Sector Size 512
Logical Sector Size 512
Logical Sectors 976773168
Supported Standards ATA8-ACS, ATA7-ATAPI, ATA6-ATAPI, ATA5-ATAPI, ATA4-ATAPI, ATA8-ACS, ATA7-ATAPI, ATA6-ATAPI, ATA5-ATAPI, ATA4-ATAPI
Specification Version Version not reported
Partition Schema MBR
UNALLOCATED 4.16 MBs
Index 1
Partition Type Primary
File system IFS, HPFS, NTFS, exFAT
Size 500.00 MBs
Index 2
Partition Type Primary
File system IFS, HPFS, NTFS, exFAT
Mount Point C:\
Serial 4CD36463
Size 49.93 GBs
Used 31.19 GBs
Free 18.74 GBs
Index 3
Partition Type Primary
File system IFS, HPFS, NTFS, exFAT
Label Music and Movies
Mount Point G:\
Serial 285BA47F
Size 76.54 GBs
Used 39.30 GBs
Free 37.24 GBs
Index 0
Partition Type Extended
Size 338.80 GBs
Index 4
Partition Type Logical
File system IFS, HPFS, NTFS, exFAT
Label Anime
Mount Point D:\
Serial D9A43D40
Size 97.65 GBs
Used 84.04 GBs
Free 13.61 GBs
Index 5
Partition Type Logical
File system IFS, HPFS, NTFS, exFAT
Label Game - Stuff
Mount Point E:\
Serial 32DF632A
Size 97.65 GBs
Used 94.76 GBs
Free 2.89 GBs
Index 6
Partition Type Logical
File system IFS, HPFS, NTFS, exFAT
Label G Stuff
Mount Point F:\
Serial C8080C3A
Size 143.49 GBs
Used 106.08 GBs
Free 37.41 GBs
Diagnostics
Scan for Errors test Failed

 

[Cooleffect]

I used Lenovo solution center to scan my computer and above is the result. So apparently there is something wrong with my hard drive. Is there any way to lock all bad sectors and continue using it?